After speaking with customer, he confirmed this was legitimate order. However, subsequent orders came in with same name, address, IP address, but different customer names and addresses, and payment types.